Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/wELZtvmZ_BHBHf9agCYtfaFCPLE.roa
File: wELZtvmZ_BHBHf9agCYtfaFCPLE.roa (raw, json)
Hash identifier: tpodvhISuwT/TPlGi/Kqz+g2fFnp+WF0UwVH3LeD23E=
Subject key identifier: C0:42:D9:B6:F9:99:FC:11:C1:1D:FF:5A:80:26:2D:7D:A1:42:3C:B1
Certificate issuer: /CN=0012b9dc976d7ce807e46fea4936c726b0c4a206
Certificate serial: 018AD74C76EEF98E22CB2105E47CCADD9CEC
Authority key identifier: 00:12:B9:DC:97:6D:7C:E8:07:E4:6F:EA:49:36:C7:26:B0:C4:A2:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABK53JdtfOgH5G_qSTbHJrDEogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/wELZtvmZ_BHBHf9agCYtfaFCPLE.roa
Signing time: Wed 27 Sep 2023 15:40:27 +0000
ROA not before: Wed 27 Sep 2023 15:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2a13:bb40::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:4c:76:ee:f9:8e:22:cb:21:05:e4:7c:ca:dd:9c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0012b9dc976d7ce807e46fea4936c726b0c4a206
Validity
Not Before: Sep 27 15:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c042d9b6f999fc11c11dff5a80262d7da1423cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:64:73:9a:f3:65:e7:df:54:c2:b2:77:41:38:
66:fa:1f:cb:57:31:21:88:5d:10:19:f5:24:7d:24:
10:7a:aa:68:7b:8e:e8:99:28:57:fc:cb:7b:58:5e:
e2:08:3d:98:51:f5:a7:6a:99:01:95:33:7b:6f:f3:
8e:d0:da:75:94:66:13:f8:64:5e:9f:b5:a0:51:c3:
52:c7:bc:d4:6d:6a:01:42:b5:11:c7:3f:18:b7:7c:
7f:78:68:cb:95:b4:09:40:80:74:62:e7:86:34:08:
a1:77:3e:3a:a0:e7:11:c4:90:42:5e:bc:43:3f:64:
9b:01:90:35:fc:5b:04:b8:f0:72:9b:ca:42:95:a5:
88:b4:d2:9b:3b:3e:9f:f0:56:f2:ea:f0:11:c1:3a:
9a:1b:72:6e:de:9f:b6:d6:c6:fc:a1:7f:33:2e:09:
78:af:82:82:a4:27:c4:ef:83:8c:25:ac:c6:48:b7:
5d:06:54:de:50:0d:1d:60:1c:6d:7d:50:47:74:b4:
0b:be:d4:7c:91:53:49:ad:d1:aa:e1:ad:4a:dc:17:
40:dd:4e:60:53:42:dd:61:e1:2e:c2:61:7b:9b:1e:
0c:90:f9:2d:83:6e:2b:8f:83:87:71:ad:f9:0d:ed:
87:c2:2f:89:8c:7d:98:f5:c5:3a:cb:79:fb:ed:a5:
20:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:42:D9:B6:F9:99:FC:11:C1:1D:FF:5A:80:26:2D:7D:A1:42:3C:B1
X509v3 Authority Key Identifier:
keyid:00:12:B9:DC:97:6D:7C:E8:07:E4:6F:EA:49:36:C7:26:B0:C4:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABK53JdtfOgH5G_qSTbHJrDEogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/wELZtvmZ_BHBHf9agCYtfaFCPLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/ABK53JdtfOgH5G_qSTbHJrDEogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bb40::/29
Signature Algorithm: sha256WithRSAEncryption
94:d9:e0:e9:66:7f:99:b7:59:97:b4:da:c1:2a:c4:c6:d7:41:
ad:6f:66:7c:a3:0d:43:f7:e7:06:96:64:d9:65:ee:c9:99:ac:
13:6f:0e:84:fc:bd:58:e1:d0:a2:0a:5c:87:f2:c9:c0:94:b3:
51:18:1d:4d:88:7a:ee:83:2f:14:94:f5:7f:7e:09:9c:9f:a6:
dc:f0:44:1a:8d:d7:86:68:b5:90:2a:8c:21:b8:0a:5c:58:24:
70:36:8f:91:e7:3d:65:27:16:31:1b:cc:27:0c:35:be:90:8c:
a9:39:fb:5e:1b:5e:73:a6:0c:05:a5:9a:63:f4:14:82:86:75:
7e:84:7c:08:40:ea:35:8b:6d:43:dc:65:ef:cc:be:94:16:20:
03:c1:84:cf:3c:3b:f9:20:12:87:3f:7c:4c:f1:ce:dc:bf:6d:
ce:1e:ab:52:4e:da:77:79:30:ad:a3:2b:f9:e6:70:68:c5:6f:
2e:91:1c:37:8e:ed:fe:57:5b:bb:ef:b3:ce:36:fd:a9:c8:31:
dd:33:af:91:18:d7:ff:e0:a8:4d:92:6c:cd:5d:6d:5d:c0:7c:
b0:01:0e:4c:36:a8:fa:63:72:26:f0:cc:52:18:ce:47:33:b0:
f6:71:8d:f0:af:e3:19:35:80:70:eb:14:a7:7c:8a:b1:ac:5e:
0f:61:fe:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:31 2025 by rpki-client